Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File:                     4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier:          0GWdPpQXv9CAJBMGGuLO9vMbwbxwz5D6a2bejWlQYxE=
Subject key identifier:   EC:BA:16:18:7A:DB:04:35:54:8F:92:7A:44:CB:AA:21:84:0F:8A:33
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       2873
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number:          2803
Signing time:             Tue 22 Sep 2026 15:36:10 +0000
Manifest this update:     Tue 22 Sep 2026 15:36:10 +0000
Manifest next update:     Tue 29 Sep 2026 15:36:10 +0000
Files and hashes:         1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: CtXpYlg6EFU81GrfUlt+EmRyzuRGPPUKPT3w+svHBlE=)
                          2: 6CED3FB2866C11F1879DBD6D59A30FBC.roa (hash: 7d89IoO7oSE4BWIA1+3nLNGX3bTaRyu/ngtSyVYUEVo=)
                          3: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: msg45GhibqVfY+xRxDR7oBrJaU3IgBi5F9syEpc2quM=)
                          4: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: lki+CHXiL8jgebBM0y87J9S1Z38ejK6RVZBLe05r+fU=)
                          5: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zy3egj4OMiHO48ljcoYfTBvfVuw49NEk7RLswgs1WQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10355 (0x2873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: Sep 22 15:36:10 2026 GMT
            Not After : Sep 29 15:36:10 2026 GMT
        Subject: CN=6ab2a06a-20b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:30:b3:62:96:96:49:e4:f3:ba:5d:46:2d:be:
                    af:3e:8d:2b:37:9d:63:cd:f2:25:c1:c6:40:6f:c6:
                    5f:cb:87:7b:f0:9c:8d:2c:bd:97:e9:fa:5b:70:3c:
                    76:43:c2:48:ba:77:3f:27:1f:c4:1b:38:f2:84:7e:
                    b1:de:10:31:28:cc:a5:84:40:24:b7:f8:55:9c:4d:
                    93:70:2a:94:cb:7f:29:56:a9:00:78:72:af:eb:d8:
                    12:f7:3a:e0:2e:f0:dd:c9:32:20:06:4c:a9:fc:fa:
                    bd:d7:1d:0b:aa:dd:ce:17:e3:01:40:d8:66:7e:c5:
                    98:f7:f3:bb:ab:30:0f:f4:b8:e7:95:c4:7e:54:b0:
                    35:a5:6d:f6:50:ea:b1:5f:1d:88:04:81:da:c3:51:
                    2f:04:0d:44:c2:c0:1c:cf:89:95:08:7c:29:6e:91:
                    e5:11:dc:33:01:83:1f:ff:0d:7c:30:6d:b3:07:d8:
                    e2:45:67:46:73:49:01:bc:ef:7e:16:a6:3b:7b:98:
                    5f:9b:0d:06:1a:33:61:81:ac:36:fd:97:b0:ff:bd:
                    3b:c8:98:40:8a:b6:32:6c:b2:81:06:9a:26:34:de:
                    29:8d:c5:b1:aa:94:35:57:43:54:ad:b9:4d:e9:69:
                    1b:ab:52:e0:00:dc:e0:34:01:2b:69:bc:21:44:62:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BA:16:18:7A:DB:04:35:54:8F:92:7A:44:CB:AA:21:84:0F:8A:33
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f7:d6:5f:47:c0:80:47:96:ac:33:54:ca:a4:b3:f5:b9:81:
         5c:7d:0c:ed:64:ab:ba:db:fd:9c:d0:b6:fd:3b:a6:eb:b9:ca:
         85:96:09:eb:e7:3c:26:7e:70:b3:ee:79:4b:43:35:95:6c:be:
         54:3c:d5:29:4a:33:43:43:48:49:d3:5b:e2:1d:d6:8e:14:1d:
         76:8b:f1:39:19:7d:30:a0:9a:0a:6a:f8:a5:c0:63:45:a1:db:
         d6:ff:72:2f:e1:6c:a0:2c:27:4c:d7:71:07:d3:d4:b0:d0:50:
         07:e0:73:29:f1:73:e6:f3:ee:7a:7e:7e:a1:b2:35:c2:d3:81:
         d5:7c:5e:35:5b:60:f1:e0:09:3f:07:7b:93:82:c0:00:b6:f2:
         14:a8:a4:4a:73:58:8a:a7:d7:37:cb:80:f7:1d:06:58:e1:aa:
         86:54:2a:43:fc:3e:bc:ec:14:e2:45:31:6b:d4:8a:27:20:bf:
         04:81:43:39:33:34:e3:1e:48:66:67:1d:f9:6f:31:a8:0b:a5:
         b0:c9:3c:4a:7a:7f:80:bb:8d:45:f5:c3:ee:a5:fd:9c:81:9b:
         f9:32:53:ee:de:88:98:9e:33:2f:74:0b:e2:05:ca:f6:e4:bd:
         25:cc:e1:47:ed:a1:af:94:b6:a6:aa:10:a9:ab:6f:64:84:67:
         b4:61:0f:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTYyMkYxMTAvBgNVBAUTKEUwOEFDNTUwMEUxRkYxOEZENUQ1MkI3OTdDNTA5N0RE
MEFCOTRCRTUwHhcNMjYwOTIyMTUzNjEwWhcNMjYwOTI5MTUzNjEwWjAYMRYwFAYD
VQQDEw02YWIyYTA2YS0yMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/DCzYpaWSeTzul1GLb6vPo0rN51jzfIlwcZAb8Zfy4d78JyNLL2X6fpbcDx2
Q8JIunc/Jx/EGzjyhH6x3hAxKMylhEAkt/hVnE2TcCqUy38pVqkAeHKv69gS9zrg
LvDdyTIgBkyp/Pq91x0Lqt3OF+MBQNhmfsWY9/O7qzAP9LjnlcR+VLA1pW32UOqx
Xx2IBIHaw1EvBA1EwsAcz4mVCHwpbpHlEdwzAYMf/w18MG2zB9jiRWdGc0kBvO9+
FqY7e5hfmw0GGjNhgaw2/Zew/707yJhAirYybLKBBpomNN4pjcWxqpQ1V0NUrblN
6Wkbq1LgANzgNAErabwhRGIFVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOy6Fhh6
2wQ1VI+SekTLqiGED4ozMB8GA1UdIwQYMBaAFOCKxVAOH/GP1dUreXxQl90KuUvl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIyRi82OTc1NDhDOERB
Q0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZX1YxU3Q1ZkZDWDNRcTVT
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRJckZVQTRmOFlfVjFTdDVmRkNYM1FxNVMtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NjIyRi82OTc1NDhDOERBQ0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZ
X1YxU3Q1ZkZDWDNRcTVTLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlPfWX0fAgEeWrDNUyqSz9bmBXH0M7WSrutv9nNC2/Tum67nKhZYJ6+c8Jn5w
s+55S0M1lWy+VDzVKUozQ0NISdNb4h3WjhQddovxORl9MKCaCmr4pcBjRaHb1v9y
L+FsoCwnTNdxB9PUsNBQB+BzKfFz5vPuen5+obI1wtOB1XxeNVtg8eAJPwd7k4LA
ALbyFKikSnNYiqfXN8uA9x0GWOGqhlQqQ/w+vOwU4kUxa9SKJyC/BIFDOTM04x5I
Zmcd+W8xqAulsMk8Snp/gLuNRfXD7qX9nIGb+TJT7t6ImJ4zL3QL4gXK9uS9Jczh
R+2hr5S2pqoQqatvZIRntGEPLQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:35:39 2026 by rpki-client